Privacy policy

Last updated 29 September 2026

Your files

We never receive your files. Every file you drop in is read and rewritten by code running in your own browser, inside a frame served with a Content-Security-Policy of connect-src 'none'. That directive makes the browser refuse every outbound request from that frame — fetch, XMLHttpRequest, beacons, WebSockets. It is not a promise we are asking you to trust; it is a rule your browser enforces, and here's exactly how to watch it work in your own developer tools.

We have no upload endpoint, no file storage, and no ability to retrieve anything you process here. Nothing about the contents of your files reaches us, including their names.

Advertising

This site is free and is funded by advertising through Google AdSense. Google and its partners set cookies and may use device identifiers to serve and measure ads. This happens in the main page, never in the sandboxed frame that handles your files — those two contexts are separated deliberately so that advertising code and your file data are never in the same place.

You can review and change what Google collects at My Ad Center, and read how Google uses data from sites that use its services at policies.google.com. Visitors in the EEA, UK and Switzerland are asked for consent before any non-essential cookie is set, and can change that choice at any time.

Analytics

We use Google Analytics to count visits and see which pages people use. Like the advertising above, it runs in the main page, never in the sandboxed frame that handles your files, and we send it nothing about your files: not their names, not their contents, not what we found in them.

Google Analytics sets its own cookies (_ga and _ga_*) to tell a returning visitor from a new one. For visitors in the EEA, UK and Switzerland it runs without setting cookies. You can opt out of Google Analytics on every site with Google's opt-out browser add-on.

What we store on your device

A service worker caches the application so it keeps working with no network connection. That cache holds the site's own HTML, CSS and JavaScript. It never holds anything from your files. You can clear it at any time through your browser's site-data settings.

Children

This site is not directed at children under 13 and we do not knowingly collect information from them.

Changes

If this policy changes we will update the date above. Material changes will be described here rather than made quietly.

29 September 2026: added Google Analytics, described under Analytics above.

Contact

Questions about this policy: get in touch.